The policy identifies biometric information as a collected data category encompassing steps, distance, calories, weight, heart rate, sleep stages, active minutes, female health data, and Live Coaching Services data, and authorizes collection of similar data from third-party connected services.
This analysis describes what Fitbit's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The biometric data category as defined in the policy covers a broad range of health and physiological metrics including female health tracking data and Live Coaching Services data, which under certain U.S. state laws (including the Washington My Health My Data Act) and GDPR qualify as specially protected categories requiring heightened consent and processing controls.
Under this provision, Fitbit collects and processes a defined set of biometric health metrics from device use and connected third-party services. For EEA, UK, and Switzerland users, this data is classified as special category data under GDPR requiring explicit consent; for U.S. users in certain states, this data may qualify as consumer health data subject to state-specific protections.
Cross-platform context
See how other platforms handle Biometric Data Collection Scope and similar clauses.
Compare across platforms →"Biometric information, such as your exercise, activity, sleep, or health data, including the number of steps you take, distance traveled, calories burned, weight, heart rate, sleep stages, active minutes, female health data, Live Coaching Services data, and any similar information to which you grant us access from another service.Excerpt from Fitbit's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The biometric data category as defined in the policy covers a broad range of health and physiological metrics including female health tracking data and Live Coaching Services data, which under certain U.S. state laws (including the Washington My Health My Data Act) and GDPR qualify as specially protected categories requiring heightened consent and processing controls.
Under this provision, Fitbit collects and processes a defined set of biometric health metrics from device use and connected third-party services. For EEA, UK, and Switzerland users, this data is classified as special category data under GDPR requiring explicit consent; for U.S. users in certain states, this data may qualify as consumer health data subject to state-specific protections.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Fitbit.